<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
<head>
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="GENERATOR" content="Mozilla/4.79C-CCK-MCD  [en] (X11; U; SunOS 5.9 sun4u) [Netscape]">
</head>
<body>

<center>
<h1>
Grid Engine 5.3p5 fixes multiple openSSL vulnerabilites</h1></center>

<center>Regensburg, Germany -- November 21, 2003</center>

<p><br>
<p>Grid Engine (SGE) 5.3p5 is a patch release which fixes multiple vulnerabilites
of the OpenSSL library 0.9.7a.&nbsp; Only users who run Grid Engine with
OpenSSL support enabled ("<i>CSP mode</i>") should install this patch.
Other users should check&nbsp; the complete list of bug fixes in this release
(see below) to find out whether they need to install this release. Grid
Engine 5.3p5 is linked with OpenSSL 0.9.7c.
<p>For more information about the the openSSL vulnerabilites see the CERT&reg;
Advisory CA-2003-26
<blockquote><a href="http://www.openssl.org/news/secadv_20030930.txt">http://www.cert.org/advisories/CA-2003-26.html</a></blockquote>
and the OpenSSL Security Advisory
<blockquote><a href="http://www.openssl.org/news/secadv_20030930.txt">http://www.openssl.org/news/secadv_20030930.txt</a></blockquote>
SGE 5.3p5 is fully compatible with previous SGE 5.3 releases. This release
is available as a courtesy binary distribution from Sun Microsystems at
the <a href="/project/gridengine/download.html">project download page.
</a>This
patch release changes the binaries and the architecture independent files
("common" package). The unchanged PDF documentation set for SGE and SGEEE
is provided by Sun Microsystems as a courtesy contribution for users of
the Grid Engine open source software.
<p>Users who do a new installation of SGE need to follow the directions
at the project download page. Users who install this version as a patch
for any previous SGE 5.3 release can find directions how to install the
patch at
<blockquote><a href="/project/gridengine/install53patch.txt">install53patch</a></blockquote>
A list of bugfixes for this release can be found at
<blockquote><a href="/project/gridengine/53patches.txt">53patches</a></blockquote>
Users who want to access the corresponding source code need to checkout
the CVS tag
<blockquote><b>V53p5_TAG</b></blockquote>
in the branch of the CVS repository
<blockquote><b>V53_beta2_BRANCH</b></blockquote>
A snapshot of the Grid Engine 5.3p4 sources is available as a source tarball
at the&nbsp; <a href="/servlets/ProjectDownloadList">File Exchange Tool</a>
as file <a href="/servlets/ProjectDownloadList?action=download&dlID=77">sge-V53p5_TAG-src.tar.gz</a>.
</body>
</html>
